--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-29T23:13:12Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-29T23:13:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-29T23:13:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-29T23:13:26Z" name: system:openshift:openshift-monitoring-bzpk5 resourceVersion: "8450" uid: 4c091767-87dd-4850-b1c3-73ded8440f2a spec: extra: authentication.kubernetes.io/credential-id: - JTI=9b533651-acc8-4a85-bf47-cb524ca84f19 authentication.kubernetes.io/node-name: - ip-10-0-134-8.ec2.internal authentication.kubernetes.io/node-uid: - 9e263630-bb34-4081-ab63-61cbe8039293 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-tx897 authentication.kubernetes.io/pod-uid: - 86d517f1-0115-4d62-983c-2ad7b98ebb94 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFEQ0JwZ0lCQURCRU1VSXdRQVlEVlFRREV6bHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXMXZibWwwYjNKcGJtYzZjSEp2YldWMGFHVjFjeTFyT0hNd1dUQVRCZ2NxaGtqT1BRSUJCZ2dxCmhrak9QUU1CQndOQ0FBVC9VRit4RlNndjV4Vkw5S3JtcGl1N01FcjA0TUdQY0pZMWJvVGJjVXQvVVhJcjVTSzkKdTBZR1kzNXd1ZWE1aW5lS1U1VDI3WmFQWHd2ekxkNE5LOXFKb0FBd0NnWUlLb1pJemowRUF3SURTUUF3UmdJaApBTzI2V291TkpzQXNGVXFraXZlYVBBM1IvRkFKUWZ3ZjMzQ0wrcFhRczB6UEFpRUF2WkJ2a1NaTkFQcVFmNlR5CmM1eE5PbzhGODVsRnR0Um1sWWVlbjcrc2JOOD0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client uid: a777130e-f060-46d9-aebd-4ab9fbfa157c usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-10-29T23:13:12Z" lastUpdateTime: "2026-10-29T23:13:12Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-bzpk5" reason: AutoApproved status: "True" type: Approved